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entry/ M [State : plain] 

do/ Me=encrypt(M) 

exit/ Me [State : encrypted] 
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entry/ Me [State : encrypted] 
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entry/ Me1 [State : encrypted] 

do/ M=decrypt(Me1) 

event M [State : PLAIN]/ perform(M) 
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3: ck=generateCommunk^tionKey{cartJ^ 



7: pefformTransact)on(cardNr) 



CommunicationKey 
ck represents 
the encrypted 
equivalent of the 
Card number 
.cardNr 
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^4: sendCommunicatronKey(ck) 
request For Purchase 






Card number cardNr 
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decrypted equivalent 
of the 
communicalionKey ck 
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9: responseToRequestForPurchase 
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The CommunicationKey ck has 
no meaning for the Web Server, 
which is used only like a carrier 
for this specific information, in 
contrast with the existing 
solutions, where instead of ck, 
the Card number is used. 



Any attempt to use the 
CommunicationKey ck more 
than once results in an 
authentication failure and 
therefore the Card number 
remains unknown to any third 
party involved in the 
transaction between the Client 
knand the Bank 
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B : context 
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«select parameterized context M contextParam M » 
contextParam = f (context, parameter) 



where context e Z, parameter eP.PcZ 
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«select secret key "p u » 
p = g(contextParam) 

where p is prime, p > 2 
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«select secret key "n"» 
n = h(context,parameter) 

where n e Z, n > 0 
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«select modulus "m"» 
m - p A n 

where m e Z, m > 0 
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«select encryption key V» 
a = k(context, parameter) 

where a e M m , (a,9(m)) = 1, 0(m) = p n (1 - 1/p) 
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«select communication key "a1"» 
a1 

where a1 e M m , (a1,9(m)) = 1, a*a1s1 mod 0(m) 
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«select list L of of possible candidates» ) 
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72 y^f «select element from list L» ^ ^ 
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«select parameterized context "contextParam"» 
contextParam = f(z, parameter) 
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| ( «select secret key "p"» 1 
H p = g(contextParam) 
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{ «select secret key "n"» ) 
n = h(z.parameter) j 
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■ «select modulus "m"» 1 



m = p A n 



77 -\T «select encryption key "p"» ^ 
! p = k(z, parameter) I 
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oc1=1mod 0(m) ^ 
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Input : communication key 
a 1 derived from context 



Select list L of possible 
candidates for context 
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Select parameterized context 
'contextParam' 

contextParam = f(z,parameter) 
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Select secret key 'p' 
p = g(contextParam) 
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Select secret key 'n' 


, n = h(z,parameter) 
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m = p n 
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Solve ecuation 




al * x = 1 mod 0(m) 
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Input: context 



101 ^Vj compute modulus m derived from context 
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retrieve previouslncrement for context 



1 03 ^*\^ increment = next(previousIncrement) 
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a = k(context, increment) 
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send communication key ctl, where a * al = 1 mod 0(m) 
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f 


retrieve previous!ncrement z for z 




r 


solve x * al = 1 mod 


9(nO 




FIGURE 8 



1: ck = generateConYnunicaUonKey(cellularlD) 

121^ / ^ 122 




2: requestToPlaceCall(ck) 



4: responseToRequestToPlaceCall 
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celluIarlD represents the ceil 
phone id code, such as ESN and/or 
MIN.where ESN=Electronic Serial 
Number and 

MIN=Mobite IdentificationNumber. 
ck represents the encrypted 
equivalent of the cellular ID and a 
parameter such as a counter and/or 
date/time stamp. 



3: authenticated ient(cJ<) 



carrier 
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the carrier(cellular phone 
company) processes the request 
if the communication key was 
derived from any of various key 
data from a previously provided 
data pool related to the client, 
such as the cell phone id code, 
in combination with a parameter 
such as a counter and date/time 
^stamp. 
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